Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-rmjr-87wv-gf87
  • npm/mammoth
  • Maven/org.zwobble.mammoth:mammoth
  • PyPI/mammoth
  • NuGet/Mammoth
Mammoth is vulnerable to Directory Traversal 4 days ago
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-9rvm-p3qm-f4vv
  • NuGet/Smidge
Smidge is vulnerable to Path Traversal 5 days ago
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-4mjw-xr5x-prpc
  • NuGet/Apache.NMS.AMQP
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability 5 days ago
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-gwq6-fmvp-qp68
  • NuGet/Microsoft.NetCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NetCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.NetCore.App.Runtime.linux-musl-x64
  • ... 7 more
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability 6 days ago
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-w3q9-fxm7-j8fq
  • NuGet/Microsoft.Build.Tasks.Core
  • NuGet/Microsoft.Build
  • NuGet/Microsoft.Build.Utilities.Core
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability 6 days ago
  • Fix available
  • Severity - 7.3 (High)
GHSA-5rrx-jjjq-q2r5
  • NuGet/Microsoft.AspNetCore.Server.Kestrel.Core
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
  • ... 8 more
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability 14 Oct
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-q5r6-9qwq-g2wj
  • NuGet/Amazon.IonDotnet
Amazon.IonDotnet is vulnerable to Denial of Service attacks 09 Oct
  • Fix available
  • Severity - 8.7 (High)
GHSA-jhpv-4q4f-43g5
  • NuGet/Akka.Remote
  • NuGet/Akka.Cluster
Akka.Remote TLS did not properly implement certificate-based authentication 07 Oct
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-6cwx-42hw-w69c
  • NuGet/FormCMS
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint 30 Sep
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-456v-f425-8mcv
  • NuGet/Piranha
PiranhaCMS stored XSS 26 Sep
  • No fix available
  • Severity - 6.8 (Medium)
GHSA-jc4g-c8ww-5738
  • NuGet/DotNetNuke.Core
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile 23 Sep
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-gj8m-5492-q98h
  • NuGet/DotNetNuke.Core
DNN Vulnerable to Stored XSS Using Backend Admin Credentials 23 Sep
  • Fix available
  • Severity - 2.4 (Low)
GHSA-2qxc-mf4x-wr29
  • NuGet/DotNetNuke.Core
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module 23 Sep
  • Fix available
  • Severity - 9.0 (Critical)
GHSA-7rcc-q6rq-jpcm
  • NuGet/DotNetNuke.Core
DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field 22 Sep
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-wq2j-w9pm-7x2p
  • NuGet/DotNetNuke.Core
DNN allows loading unused themes on anonymous clients through query parameters 22 Sep
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-w7r3-mgwf-4mqq
  • NuGet/KubernetesClient
Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain 17 Sep
  • Fix available
  • Severity - 6.8 (Medium)